Know what hit your network — before your subscribers call.
Flow-based network diagnostics for WISPs, ISPs, IX peering nodes and data centers. See which traffic is behind a problem and where to look next — passive, and alongside the monitoring you already run.
» built for
WISPs & ISPs
See what changed, who is affected and where the traffic came from.
Telco, transit & IX
Follow traffic across transit, peering and the IX fabric — and see what moves where.
Private data centers
Locate unusual behavior inside the environment and the workloads involved.
Monitoring tells you something is wrong.
FLOWCUTTER helps you find out why.
Challenge
Basic monitoring
FLOWCUTTER
Incident investigation
Alerts and graphs
AI explains incidents in plain language
DDoS attack
Shows traffic spikes
Identifies attack sources, type and targets
Uplink saturation
Shows high utilization
Identifies top customers, applications and ASNs
Customer reports slow internet
No flow-level detail
Shows historical traffic with timestamps
Open port on customer device
Not typically visible
Automatically scans for open ports
Peering traffic changes
Limited traffic visibility
Shows traffic shifts between peers and ASNs
» WHAT OPERATORS SAY
We were unable to identify the cause using only SNMP. FLOWCUTTER identified a reflective amplified DDoS attack. By Monday, our network was running perfectly.
We recommend FLOWCUTTER to ISPs and WISPs that want deeper visibility into their traffic. It helps teams spot DDoS and unusual behavior early, with less guessing during an incident.
With FLOWCUTTER I found that one customer had opened DNS to the internet — it filled our radio uplink and caused outages for the whole subnet. Now we get alerts for every newly opened port.
We collect flow telemetry for our entire, far-from-small network on the FLOWCUTTER collector. Surprisingly, it stays fast on analytical queries even where other tools run out of breath.
Built in. Always running.
Deep NetFlow diagnostics
See who talks to whom on your network. SNMP only shows how much.
Automated anomaly detection
Ready-made detection catches DDoS, amplification attacks and scans as they start.
Automated vulnerability scan
Checks your IP ranges for open ports and known CVEs. Runs on its own.
» REAL CASES. REAL NETWORKS.
What network teams solved with FLOWCUTTER.
DDoS
How ISP outlasted a two-week DDoS wave
A distributed DDoS attack slipped past scrubbing. Flow data let the ISP cut each wave down until the attacks finally stopped.
DNS & IP reputation
Blacklisted IP traced back to ISP’s own backbone
A shared blacklisted IP kept getting flagged while NetFlow looked normal. The cause: botnets on the ISP’s own backbone devices.
DDoS
How UK ISP ended a 2-day DDoS attack
A UK ISP faced 20 DDoS attacks in two days. Flow data showed the vector, and DDoS mitigation via upstream BGP ended the outages.
» SEE IT IN ACTION
What your graphs don’t show.
FLOWCUTTER does — in plain words.
» BRING YOUR OWN AI
FLOWCUTTER finds it. Your AI explains it.
Ask your own Claude or ChatGPT what happened — and what to do next.
Read me first
- Since02:15:00
- Targets203.0.113.10 · 203.0.113.24
- PatternDNS flood · UDP 53 · 3 source ASNs
- Top sourceAS64500 · 52 %
Incident summary
- WhatDDoS · DNS flood, port 53
- Who is hit2 customer IPs
- Where to lookAS64500 · 52 % of the attack
- Next stepRate-limit UDP 53 to the targets at the edge
» PARTNERS & INDUSTRY ASSOCIATIONS
» COMMON QUESTIONS
What network teams ask first.
Will it put load on my network?
No. FLOWCUTTER is passive — it reads flow data your routers already export, or captures via SPAN/TAP with the Probe. Nothing sits in the traffic path.
Do I need to change my network architecture?
Which devices are supported?
On-premise or cloud?
Who deploys it?
Our engineers do it remotely with your team, typically in a single session.
» 30 days. Your infrastructure. Your real traffic.
See FLOWCUTTER in your own network.
Visibility from day one
Your traffic on screen from the first day. Full anomaly detection after 2 weeks of learning your network.
An engineer, not a ticket
An engineer reviews your request and replies with clear next steps within one business day.
